Package org.bouncycastle.pqc.crypto.sdith

Class SDitHParameters

  • public class SDitHParameters
extends java.lang.Object
    SDitH parameter set descriptor.

    SDitH (Syndrome-Decoding-in-the-Head) has 24 NIST-submitted variants formed from the cross of:

    • MPC structure: Hypercube or Threshold,
    • NIST category: 1, 3, or 5,
    • Field: GF(256) or P251.
    The current Bouncy Castle port wires up the Hypercube / Category 1 / GF(256) variant matching the shipped reference KAT vectors. Additional variants can be added by populating new public static final constants here and adding the corresponding precomputed tables to SDitHPrecomputed.

    The numeric fields follow the reference param.h convention:

    • m: code length,
    • k: code dimension,
    • w: Hamming weight bound on the SD solution,
    • d: splitting factor (number of twists),
    • t: number of MPC evaluation points per iteration,
    • tau: number of parallel MPC repetitions,
    • dimD: hypercube dimension (2^D leaf parties),
    • seedSize, rhoSize, saltSize, commitSize, hashSize: in bytes,
    • fpointSize: extension-field byte width (3 or 4),
    • hashBits: SHA3 variant used for commitments and Fiat-Shamir,
    • xofBits: SHAKE variant used as XOF.

    • Field Detail

      • sdith_hypercube_cat1_gf256

        public static final SDitHParameters sdith_hypercube_cat1_gf256

      • sdith_hypercube_cat3_gf256

        public static final SDitHParameters sdith_hypercube_cat3_gf256

      • sdith_hypercube_cat5_gf256

        public static final SDitHParameters sdith_hypercube_cat5_gf256

      • sdith_hypercube_cat1_p251

        public static final SDitHParameters sdith_hypercube_cat1_p251

      • sdith_hypercube_cat3_p251

        public static final SDitHParameters sdith_hypercube_cat3_p251

      • sdith_hypercube_cat5_p251

        public static final SDitHParameters sdith_hypercube_cat5_p251

      • sdith_threshold_cat1_gf256

        public static final SDitHParameters sdith_threshold_cat1_gf256

      • sdith_threshold_cat3_gf256

        public static final SDitHParameters sdith_threshold_cat3_gf256

      • sdith_threshold_cat5_gf256

        public static final SDitHParameters sdith_threshold_cat5_gf256

      • sdith_threshold_cat1_p251

        public static final SDitHParameters sdith_threshold_cat1_p251

      • sdith_threshold_cat3_p251

        public static final SDitHParameters sdith_threshold_cat3_p251

      • sdith_threshold_cat5_p251

        public static final SDitHParameters sdith_threshold_cat5_p251

    • Method Detail

      • getNbRevealed

        public int getNbRevealed()
        Threshold variant: number of revealed parties per execution. Zero for hypercube variants.

      • getTreeMaxOpenLeaves

        public int getTreeMaxOpenLeaves()
        Threshold variant: upper bound on Merkle authentication-path nodes per execution. Zero for hypercube variants.

      • getNbParties

        public int getNbParties()
        Threshold variant: number of MPC parties. For GF(256) this is 256 (1 << dimD); for GF(p251) it is 251 (= the prime field size). The Merkle tree always has 1 << dimD max capacity but only getNbParties() leaves are populated for the p251 variants.

      • getName

        public java.lang.String getName()

      • getVariant

        public int getVariant()

      • getField

        public int getField()

      • getCategory

        public int getCategory()

      • getM

        public int getM()

      • getK

        public int getK()

      • getW

        public int getW()

      • getD

        public int getD()

      • getT

        public int getT()

      • getTau

        public int getTau()

      • getDimD

        public int getDimD()

      • getSeedSize

        public int getSeedSize()

      • getRhoSize

        public int getRhoSize()

      • getSaltSize

        public int getSaltSize()

      • getCommitSize

        public int getCommitSize()

      • getHashSize

        public int getHashSize()

      • getFpointSize

        public int getFpointSize()

      • getHashBits

        public int getHashBits()

      • getXofBits

        public int getXofBits()

      • getWd

        public int getWd()

      • getYSize

        public int getYSize()

      • getHaNSlice

        public int getHaNSlice()

      • getMd

        public int getMd()

      • getFpointMask

        public int getFpointMask()